Discussion on Live Streaming Over VPS - Nginx RTMP And M3U8

haizrul

Hi, i have a question to ask. Does the output .m3u8 link secured, for example it can only be played on certain domains only? I'm interested if this script have that function because i don't want people to steal and use my stream elsewhere

5 months ago
byshako byshakoAuthor

Hi!

That is a very good question. Regarding the current version of the script: it does not have built-in domain locking or stream security by default. Currently, the script functions as a dynamic playlist generator, which means if someone obtains the final .m3u8 link, they could potentially use it on other platforms.

However, I can implement this security feature for you. Protecting a stream from 'hotlinking' or theft usually requires a two-layer approach:

Server-Side Security: Configuring your media server (e.g., Nginx) with a secure_link module to validate requests.

Token Authentication: Updating this script to generate unique, time-limited, and domain-restricted tokens for each session.

With these updates, the stream will only work on your authorized domains and the links will expire automatically, making them useless if stolen.

If you are interested in this custom security integration, we can discuss the details and I can set it up for you. Please contact me directly via Telegram for a faster conversation: @byshako

Best regards!

5 months ago
byshakoAuthor

Hi!

That is a very good question. Regarding the current version of the script: it does not have built-in domain locking or stream security by default. Currently, the script functions as a dynamic playlist generator, which means if someone obtains the final .m3u8 link, they could potentially use it on other platforms.

However, I can implement this security feature for you. Protecting a stream from 'hotlinking' or theft usually requires a two-layer approach:

Server-Side Security: Configuring your media server (e.g., Nginx) with a secure_link module to validate requests.

Token Authentication: Updating this script to generate unique, time-limited, and domain-restricted tokens for each session.

With these updates, the stream will only work on your authorized domains and the links will expire automatically, making them useless if stolen.

If you are interested in this custom security integration, we can discuss the details and I can set it up for you. Please contact me directly via Telegram for a faster conversation: @byshako

Best regards!

5 months ago

More items by byshako

by in